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From: Craig Wright 

Sent: Thursday, March 31, 2016 10:31 AM 

To: Andrew O'Hagan <andrewohagan@me.com> 
CC: Ramona Watts <ramona@rejbr.org> 
Subject: Re: Material 

Attachments: Bitcoin (1).docx 


SysUserProp: 88334F2CCAOD8E5 1C8530404366F9B82 

I have completed the annotations as comments. 

On Wed, Mar 30, 2016 at 5:34 PM, Andrew O'Hagan <andrewohagan@me.com> wrote: 

Thanks Craig. Please keep it coming -- all papers and emails and annotations that can help me build a profile of what you have done. The Dave stuff is practically 


non-existent on paper. | understand you wiped a lot, but a final trawl through your digital universe might give me something that connects the two of you 
unarguably to the invention. 





Sent from my iPhone 
On 30 Mar 2016, at 17:17, Craig Wright <craig@rejbr.org> wrote: 


Some reading... 


I have used the comment feature of word. 
The initial 15 pages of the 30 have been annotated, but I do appoligise in that I have not done more. 
You will have the completed document this week. 


More will come, both of this, and from other areas on a daily basis. 





On Tue, Mar 29, 2016 at 9:10 PM, Andrew O'Hagan <andrewohagan(@me.com> wrote: 
Thanks Craig. I'm standing by for that tomorrow, and for ANYTHING you can put your hands on that links you and Craig to the invention in 
2008. It will all help me. Best, Andrew 





Sent from my iPhone 
On 29 Mar 2016, at 20:26, Craig Wright <craig@rcjbr.org> wrote: 
You will receive the annotated document tomorrow. 


Craig 





<20160126 AP Selfish Miners Pt7.pdf> 





«selfish miner fallacy explanation ss v3.pdf> 
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it’s impossible to discuss new developments in money without thinking for a 
moment about what money is. The best place to start thinking about that is with 
money itself. Consider the UK’s most common paper money, the five or ten or 20 
quid note. On one side we have a famous dead person, Elizabeth Fry or Charles 
Dickens or Adam Smith depending on whether it’s a five or ten or 20. On the 
other we have a picture of the Queen, and just above that the words ‘I promise to 
pay the bearer on demand the sum of’, and then the value of the note, and it’s 


signed by the cashier of the Bank of England. 


It’s worth thinking about that promise to ‘pay the bearer on demand the sum of 
ten pounds’. When we parse it, it’s not clear what it means. Ten pounds of what? 
We've already got ten pounds. That’s exactly what we're holding in our hand. It 
doesn’t mean, pay the bearer on demand £10 worth of gold: the link between 
currency and gold was ended in 1971, and anyway, Gordon Brown sold off the 
Bank of England's gold reserves in the 1990s. 


The fact is, there is no answer to the question, £10 of what? The £10 is the £10, 

and it's worth what it says it is because the state, in the form of the Bank of 

England, says so, and we choose to believe it. This is what students of currency 

call ‘fiat? money, money whose value has been willed into being by the state. The / 
value of fiat money is an act of faith. There are quirks to this. Inthe case of the —_/ 
pound coin, if we ask how much it’s worth, the answer is obvious: a pound is 

worth a pound. It shouldn't be, though. According to the Royal Mint, who actually 
make the stuff, three per cent of all pound coins in circulation are fake. Allowing 
for that, we should discount the price of our pound coin, and mathematically 


assign it a value of 97p. 


Of course, there's no need to do that, because the overwhelming probability is 
that you won't have any difficulty spending it for your fake pound for its full 
nominal value. (That's unless you’re caught out by a coin slot which rejects your 


money. Most people attribute the annoying frequency with which this happens to 


government inflates mon 

more. The term printing i: 

technically correct, | know t 

the government issues more ¢1 

banks and banks use fractional r 
methodologies to inflate this further, So'| 
say printing as this is the effect but rather it 
even simpler than that in that they need to 
only increase the monetary supply. 


That's a problem. 


The value you believe you have in your 
dollar or hére in Britain pound comes dawn 
to an arbitrary arnount that actually moves. 
If the value of a meter was to fluctuate we 
would notice it very quickly but when 
money fluctuates we have a system that 
hides it from us more than anything sise 
this is what | hope to change. 
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a problem with coin slots; in reality it’s a problem with the currency. The other 
time you'll have trouble with your fake coin is when got one of the mutant squishy 
ones which look like partially chewed fruit pastilles and are so badly forged they 
verge on being endearing.) They’re worth what they claim to because we choose 


to believe in them. Your mathematically determined 97p of coin is worth a quid 


because we believe it's worth a quid. We trust it. That's the first main point about | 


money. Its value rests on our belief in its value, underwritten by the authority of | 


oj 


the state. 


For the second main point about the nature of money, we need to travel to the 
Pacific Ocean. In Micronesia, about eighteen hundred miles north of the eastern 
corner of Australia, there’s a group of islands there called Yap. It has a 

population of eleven thousand people and is largely unvisited except by divers, 
but it’s a very popular place with economists talking about the nature of money, 
starting with a fascinating paper by Milton Friedman, ‘The Island of Stone Money’, 
published in 1991. There’s a particularly good retelling of the story by Felix Martin 


in his 2013 book Money: An Unauthorised History. 


Yap has no metal. There’s nothing to make into coins. What the Yapese do 
instead is sail two hundred and fifty miles to an island called Pulau, where there’s 
a particular kind of limestone not available on their home islands. They quarry the 
limestone, and then shape it into circular wheel-like forms with a hole in the 
middle, called ‘fei’. Some of these fei stones are absolutely huge, fully twelve feet 


across. Then they sail the fei back to Yap, where they’re used as money. 


The great advantage about the fei being made of this particular stone is that 
estone on Yap. 
lue well, You 





they're impossible to counterfeit, because there’s none of the 
The fei are rare and difficult to get by definition, so they hol 
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Comment [CSW]: The problem here is 


authority. 
{ 


We send this with the issue of the PGP 
response. Too many people take what they 
hear from authoritative sources and just 
trust that itis true. Personally, have seen 
this firsthand, | really don't know how to get 
around that but itis a problem. | don't know 
if we will ever find a means of getting 
people to actually validate the truth 
themselves but at least once we have a 
ledger and methodology but cannot be 
forged we have a step in the right direction. 


Money underlies everything Sameane's we 
have truth and ownership, trut i 
property and truth and contr 

a way of giving people the t 

We can't be sure that peopl 

use those tools but at k 


still exist in a world where 
mining infrastructure ca 
through 4 large investment t 
multinational company or st 
in particular is one of the tez 
bitcoin needs to become lar 


The more computational power provided to 
bitcoin, the more difficult it is to attack, 


The amount computational power really 
cames as a measure of the market utility 
bitcoin. Right we have a system that can 
handle five transactions a second due to 
arbitrary constraints. 


This Is a fraction of what is needed for 
global commerce. As utilisation of bitcain 
Increases, so will the price. As the price 
Increases, so will the Investment in mining. 
Mining does not drive the cost of bitcoin 
rather the value of bitcoin in the commun 
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advantage that they're impossible to steal because they're just too big. By the 
same token, though, they're impossible to move, so what happens is that if you 
want to spend some of the money, you just agree that somebody else now owns 
the coin. A coin sitting outside somebody's house can transferred backwards and 
forwards as part of a series of transactions, and all that actually happens is that 
people change their minds about who now owns the coin. Everyone consents 

that the money has been transferred. The real money isn’t the coins, but the idea 
of who owns the coins. The register of ownership, held in the community memory, 


is the money. 


It has sometimes happened to the Yapese that their boats are hit by stormy 
weather on the way back from Pulau, and to save their own lives, the men have 
to chuck the big stones overboard. But then when they get back to Pulau they 
say what happened, and everyone accepts it, and the ownership of the stone is 
assigned to whoever quarried it, and the stone can still be used as a valid form of 
money because ownership can be exchanged backwards and forwards even 
though the actual stone is five miles down at the bottom of the Pacific Ocean. 


That example seems bizarre, because the details are so vivid and exotic, but our | 
money functions the same way. The register is the money. This is the second _/ 
main point about the nature of money. We think of money as being the stuff in 

our wallets and purses; but most money isn’t that. 


It's not notes and coins. In 2006, for instance, the total amount of money in the 


The reward is targeted towa 
adopters. 


world in terms of value was $473 trillion. That's a number so big it's actually very 


difficult to get your head round: about £45,000 per head for all seven billion This ic actin very niportant in Ane we 


want to limit the amount of bitcoin being 
created but for now it is Important to grow 
the market very quickly. The faster the 
grows the more benefit can be attained. 


. . . . . . F i I 
money isn't money in a physical sense. The number is even bigger in the UK, Eoporeney ee eee (aot 


people on the planet. Of that $473 trillion, less than a tenth, about $46 trillion, 


was Cash in the form of banknotes and coins. More than ninety per cent of 


where only about four per cent of money is in the form of cash. What it is instead So yes bitccin is an clectionic edna: but 


the key distinction is that all past ledgers 
have been variable. They have allowed the 


; ; thorities controlling them to alter them at 
of debits and credits that are created every time we spend money. ee 


as entries on a ledger. Its numbers on your bank balance, the electronic records 
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When we say we spend money, in fact what we’re mainly doing is making entries 
on registers. Your work results in a weekly or monthly credit from your 
employer's account to your account, maybe with another transfer of PAYE tax to 
the government, also your pension contribution if you make one, any forms of 
insurance, then a chunk automatically going off to your landlord or mortgage 
provider, all heading in different directions to the financial system, all of them 
nothing other than movement between and among all these various ledgers and 
registers. This is what almost all of what we call money mainly is: numbers 
moving on registers. It’s the same system that they have on Yap. 


The third point is that money as it’s evolved has a crucial relationship with 
technology. There are a number of technologies that are inexorably interwoven 
with the working of money. The first of them, probably the most important piece 
of technology in human history, is writing. This begins in ancient Sumer, about 
three millennia BC, with records of trade and inventory gradually evolving into 
other kinds of recorded script. But the next big invention, the next big piece of 
technology in the world of money, arrives in Renaissance Italy, with the invention 
of the balance sheet, and with that, of banks who become places where ail the 
different transactions in a society, all the various credits and debits, are gathered 


together in a single register. The bank becomes the intermediary between Comment [CSW5];: 
bitcoin as a monetary exch 


creditors who have spare money to lend and borrowers who have reasons for 


‘To some extent this ts true. It def 
monetary exchange. But itis so mu 

as well. Even our existing White pape 

and patents cover this area and in the 
following months we will be releasing a 
number of technologies that overlay bitcoin 
In the existing network. These will allow for 
the registry of goods services and more 
complex contracts. 


needing it. Instead of a near infinite multiplicity of transactions between 
individuals, swapping credits and debits backwards and forwards as we 

e 

one-to-one, all the various transactions in all the various markets of a complex 


social environment, they're now all held on the books of one institution: the bank. 


The ability to use bitcoin asa source of 
promises and controls over the truth is 
Important. Many of the general task we 
delegate to lawyers and accountants can 

‘ 3s : be autornated with a complete trail. We can 
of record keeping, was the Medici bank in Florence. eae ACL GEE GIR TBSEIS Held bobuesn 
parties without them having to sacrifice 
security. 


The society has one register, and that register is run by the bank. Arguably the 
first really successful example, the first to deploy effectively the new technology 
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The final piece to this is the invention of the central bank, with the foundation of 
the Bank of England in 1694. In return for lending the sovereign a great deal of 
gold, in the first instance to build a navy to fight the French, the Bank of England 
acquired the right to print paper money. That paper money could then be used by 
ordinary people to pay their taxes. It's at that point that banks, money and the 
modern state become fused together. The money system and the banks and the 
state are all in effect aspects of each other: a triple-headed monster, like 
Cerberus. 


Short historical digression: it took a while for this system to spread everywhere, 
especially in the United States, where arguments about the link between the 
banks and the state and the money system have been a recurring theme. In How 
Would You Like to Pay, a lucid short book on new money technologies, Bill 
Maurer points out that as recently as the 1860s, the United States had eight 
thousands private currencies in circulation, issued by ‘banks, railroad companies, 
retail stores, and other entities’. There is an interesting discussion of US money 
in Edward Castronova’s overview Wildcat Currency: he explains that states didn’t 
have the right to issue currency themselves, but they did have the right to 
regulate the issuance of money on their territory. This was a system prone to 
unintended consequences. Several states 


...permitted banks to issue money only in large denominations. This was done to 
force banks to retain adequate gold reserves. The theory was that holders of 
large denomination bills were more likely to return to the bank and exchange 
those bills for gold As a result banks would have to keep more gold on hand. A 
bank with more reserves is less likely to fail. 


That was the theory. The practise: many of the new denomination notes were too 
big too use. As a result, there was a huge proliferation in private money, issued 
by everyone from farmers and merchants to hotels and restaurants and bars. An 
ordinary person’s wallet might contain a dozen different currencies, all worth 
different amounts in different places, since a bar’s money might trade at full value 
in the bar itself, but would be worth significantly less the second you stepped out 
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the door—and then less still as you moved further and further away. The 
government response, in 1851, was to create a three-cent coin, the trime. It was 
only after 1864, when Congress banned the issuance of metal coinage for money, 
that private money began to be driven out of the economy. 


In time, even the US joined the system of state-backed money dispensed 
through a central bank. This is the system we still have everywhere in the 
developed world today. The reason a lot of people are excited about bitcoin and 
its associated technologies is that for the first time there is a genuine possibility 
of real change in this area. Money has evolved in jumps, from the invention of 
writing to the invention of the balance sheet and the bank to the creation of the 
central bank, and all of these changes are variations on the theme of money as a 
register of credits and debits. And we’re now at a point when another jump is 
possible. 


The simplest and biggest possibilities concern connectivity. We are more 
connected in more ways to more people than we ever have been at any point in 
human history. This is changing everything, and it would be deeply strange if it 
didn't change money too. There are many ways in which the impact could 
happen. For instance, a huge part of the money system is about intermediaries. It 
goes back to the Medici, to that central register where the debits and credits are 
all gathered together in one place. The bank is the intermediary between 
creditors and debtors. Obvious question: do we need that intermediary any 
more? | have money I'm not using, you need more credit than you have, to buy a 
house or start a business or buy a car or whatever. | lend you the money, and 


you pay me back. Easy-peasy. We have historically heeded mediate 








t all obvious 
n the middle: 


that —, and to take a generous cut in the PrOeESS: It 





lt seems 
very obvious to me that this area, that of P2P or peer-to-peer lending, is going to 


grow and grow. Why lend money to your bank for fuck-all interest when you can 
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Comment [CSW6]: Monsey has always 


| been a measuring stick. 


tis not as Marx promoted using a 
fallacious misrapresentation of Riccardian 
theory the value of labour but closer to an 
Austrian value of demand. 


The proponents of regulation love to 
believe how we can pramote control and 


| | @hsure the smooth running of an economy, 


The problem however comes down to one 
of calculation. Any small macro economic 
calculation can show a limited supply in a 
given area. This does not mean that tt 
scales. There is a common prot : 
physics known as the three 
Without going into the comp! 
relativistic ea we can © 

obj 


without sacrificing : somethin 

However, the problem is no 

seems. tis not even butter, 

many substitutes. Some direct substitutes 
such as margarine are clearly obvious. 
However, we need to look at all diract uses 
of butter, This extends from sandwiches to 
cakes and beyond. Once we get to that 
point t becomes even more complex. 


Itis not just sandwiches: Instead of a 
sandwich | could have a taco or a pis for 
Junch. In substituting that sandwich fora 
meat pie | have substituted butter for grain 
and meat, So even ina simple lunch | have 
créated an extremely complex scenario 
before | have even addressed the direct 
uses of the item, 
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go to Zopa, the UK’s leading P2P site, and directly lend it to someone who needs 
it, for a return of five per cent? The answer at the moment is probably that the 
banks are old and have some deposit protection, whereas online lending is new 
and doesn’t. But that answer is not writ in stone, and one lesson of the internet is 


that when customers’ behaviour changes, it can change fast. 


Connectivity has implications for other kinds of transfer too. Money is a way of 
transferring credit. New forms of directly doing that are now possible. The great 
trailblazers for this are in the developing world, especially Kenya, which has 
adopted a form of direct transfer called M-Pesa. This involves the transfer of 
credits not from bank account to bank account, but from one mobile phone to 
another. M-Pesa was introduced in 2007, and took off in popularity when violent 
chaos following the elections at the end of that year brought the regular banking 
system to a halt. That’s an example of how chaos and uncertainty around 
traditional banking creates appetite for new services—not so different from the 
United States, where the Civil War made private money finally unviable. A few 
years after its adoption, M-Pesa is the conduit for half of Kenya’s GDP. Credit 
goes from phone to phone, and that credit is a new form of money, making the 
kinds of facilities which you get from a bank account available to all sorts of 
people who don't have one. Then, once you have a record of successful 
payments on your phone, merchants and institutions will take that as a sign you 
can be extended other forms of credit, and you can start to move from the 
informal economy where the poor are trapped—where there are no records of 
their credit, no records of what they own—to the wider economy. That's huge. 


The world's population is seven billion. Only two and a half billion adults have a 


bank account. Paul Vigna and Michael Casey’s excellent book Cryptocurrency| __ | comment [csw71: 





explains what that means: 


somewhere in the order of five billion people belong to the households that are 
cut off from a financial system that the rest of us take for granted. They can’t start 
savings accounts. They don’t have checking accounts. They can’t get credit 
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cards. They live in places where banks don’t want to go, and because of this, 
they remain effectively walled off from the global economy. 


But there are six point eight billion mobile phone subscriptions in the world (more 
ilet). So twice 
ount. If your 


than the four and a half billion people who have access tc 






as many people have a mobile phone as have access to a bs 


/ 
phone can give you access to the things you would need from abank, well, ss, 


you've just disinvented the need for banks, and fundamentally changed the 
operation of the money system, across whole swathes of the developing and 
emerging world. 


The reason phones can do this is a case they embody a remarkably high level of 
trust. You can trust that the phone is the property of the person who owns it, 
because the combination of Sim card technology and pin numbers is very strong. 
Behind the user-friendly facade of chip and pin are cryptographic techniques of 
industrial strength. Indeed, the technology of pins and cashpoint machines was 
initially evolved as a question and response protocol to confirm nuclear weapon 
access codes. You can trust that this person who owns the phone is who they 
say they are: and that basic act of trust is fundamental to the operation of all 
money systems. 


What's making this possible is cryptography. Cryptography is also central to one 
of the most interesting developments in the world of money, and that is bitcoin. 
I’m not sure whether bitcoin is likely to be the most consequential of all these 
developments—peer-to-peer lending, and non-bank payment systems of the M- 
Pesa type, seem to me at least as likely to change lives, especially the lives of 


the poor. But there’s no denying that bitcoin is the best story. 


Bitcoin is a new form of electronic money, launched in a paper published on 31 
October 2008 by a pseudonymous person or persons calling himself, herself or 
themselves Satoshi Nakamoto. Note the date: this was shortly after the collapse 
of Lehmans on 15 September, and the near-death of the global financial system. 





Comment [CSW8]: | enjoyed this book 
thoroughly. 


The argument posed here reflects the 
feason again why we need to increase the 
Size of the Blockchain. As blocks grow, 
more transactions are possible. We do not 
need to substitute transaction fees for other 
costs. Tha market willtake this inte 
account But as we increase the Use of 
bitcoin and make it simpler ta obtain more 
people will be able to gain access. 


This won't happen immediately, but all 
things take time. Ikis important to 
remember that: Each year, computati 
power increases and the cost asso: 
with owning a device decrease 
Computers become more effic 


become smaller. T 


mainframes we see today. | 

access to computing resour 

a cost. | say will not be a cost because it 
will be So negligible as to be near 
background noise. For most of the world 
water is such a feature. For many this is 
inaccessible. 


Water will be scarce good far longer than 
computational power, VWe will live ina 
world where water is unavailable to many 
and yet they have access to computers the 
can speak In their native tongue and open 
a world of banking and finance that none of 
us could have guessed may have been 
possible even two decades ago. Even [do 
not know the limits of this technology and it 
is beyond comprehension. The ability to 
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Just as the civil war was the prompt for the United States to end private money, 
and the crisis of Kenyan democracy led to the explosive growth of M-Pesa, the 
global financial Crisis, seems to have been a crucial spur, if not to the 
development of bitcoin, then certainly to the timing of its launch. 


Bitcoin’s central and most exciting piece of technology is something called the 
blockchain. This is a register of all the bitcoin transactions that have ever 
happened. Every time something is bought or sold using bitcoin—remember, that 
means every time something moves from one place in the register to somewhere 
else—the new transaction is added to the blockchain and authenticated by a 


network of computers. The techniques are cryptographic. It's impossible to fake a __ 


new addition to the chain, but it's relatively easy (by relatively easy, | mean 
relatively easy for a huge assembled array of computing power) to verify a 
legitimate transaction. So: impossible to fake but simple to verify. The entities 


transparent: anyone can see the bitcoin addresses involved, but nobody knows \ 


to whom they belong. 


This combination of features has extraordinary power. It means that you can trust 
the blockchain, while knowing nothing about anyone else attached to it. Bitcoin is 
in effect a register like the one kept in people’s memory on Yap, but it’s a register 
which anyone can see and to which everyone assents. For the first time in 
human history, we have a register which does not need to be underwritten by 
some form of authority or state power, other than itself—and, as I've argued, that 
register isn't some glossy add-on to the nature of money, it actually is how money 
works. A decentralised, anonymous, self-verifying and completely reliable 
register of this sort is the biggest potential change to the money system since the 
Medici. It’s banking without banks, and money without money. The next 13 
paragraphs give a short technical explanation of how bitcoin works; if you aren’t 


interested, see you at the dropped letter. 





Blockchain, it is ju: 
unlikely, 


Comment [CSW1 


Inthe early days of bitcnin 

rieht controls in place it was 

maintain some level of anonym! 1 
really the case anymore, Although you 
cannot directly link every transaction, they 
are far from anonymous, Most importantly, 
parties engaged in an exchange are likely to 
know the identities of the other party, This is 
not completely necessary but there will 
always be methods of capturing and 
recording transactions that can lead to'a logs 
of anonymity and it will become more and 
more difficult for many peaple over time to 
maintain this anonymity, 





Bitcoin is more about privacy. This does not 
mean anonymity but rather the ability to 
protect your interests without the majority 
af people knowing them, 
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The profoundest mystery about the physical universe is that it is so 

intertwined with mathematics. Gravity is inversely proportional to the square of 
the distance between two objects. Why? Why does pi, essential in calculating the 
circumference of a circle, also prove essential to calculating the area of a circle: 
why is it an exact value, not just a rough guide or rule of thumb? Why does it also 
turn up in so many other places in mathematics? Why, for instance, is the 
probability that two random numbers have no common factor equal to 6/pi 


squared? Again, why is it exactly that, instead of roughly or sometimes that? 


We don’t know why maths reaches so deeply into the texture of physical reality. 
One of the hardest things to understand about cryptography is that it rests on 
something that is inexplicable, and that is it works. As Julian Assange has said, ‘it 





just happens to be a fact about reality, such as that you can build atomic bombs, 
that there are math problems that you can create that even the strongest state 
cannot break...there is a property of the universe that is on the side of privacy, 
because some encryption algorithms are impossible for any government to break, 
ever.’ 


The effectiveness of cryptography in essence rests on a single truth about 
mathematics: that it is impossible to factor prime numbers. For any number, there 
is no way of working out if a smaller number divides into it, short of actually doing 
the calculation. This might sound like a small point, but it means that when you 
have very long numbers—numbers that are hundreds or thousands of digits 
long—there is no way of breaking them down into factors other than trying every 
smaller number and seeing if it fits. With very very big numbers, that process is, 
in practise, impossibly time consuming. This makes very long prime numbers into 
miraculously effective cryptographical entities; the basis for all contemporary 
codes. This is in turn a hard fact for civilians to swallow, notwithstanding that it 
underlies more or less everything we do, in business terms, on the internet. (Note 
that having secure codes is not the same as having secure computers. Breaking 


into people’s computers is a completely different story from breaking their 
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codes—and once you've broken in, it often doesn’t matter what the host is doing 


cryptographically.) To grasp bitcoin—or to believe in bitcoin—you do have to take 


this power on trust. 


There are three main crypto-mathematical techniques at work in bitcoin. The first 
is the matching of a public address—that’s the bitcoin address of any given 


user—with a private key which provides access to that address. Although the 


cryptography involved in this process is fearsome, drawing on those 






1g is changing 
‘register, from address a. to address b.: at that point, your 


known as a ‘block’. 


This is where the miners come in. (Mining is a bad metaphor for what these 


computers do: it’s more like clerking or verification. But mining is what it’s called.) 


Miners take this ten-minute block of transactions, each of which combines the 


two addresses of the parties to the transaction, the quantity of bitcoin moved, and 


a time stamp, and they run them through a ‘hash function’. These are 
cryptographical algorithms for encoding information: the one bitcoin uses is 
called SHA-256. The hash function takes a stream of information of any length 
and turns it into a unique set of letters and numbers, of a fixed length. So here is 


‘The cat sat on the mat’ run through SHA-256: 


3477¢3b5 16459 76ef4dd2840dd0dc48 12551 9d3748127601205eaa6020a34f8f 


And here for purposes of comparison is ‘The cit sat on the mat’: 
a8727c0891cec28e10c03aa09c759d92fd628e1 31 435b502c04e60d09ce4 ef 76 


11| 30 
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Comment [CSW11]: Have a read of my 
selfish miner paper. 


it's actually more robust than people readily 
acknowledge, The arguments against bitcoin 
turn out to be false. The problem is of course 
that they can only be mathematically verified 
as such. | still haven't votten around the 
problem of authority. Ewe take the PGP 
paper for instance it was a simple process ta 
check that this was false and 

chose the simple path of 

authority rather th: 


but not o em has 
accurately defined and valid 
problem. They have not che 


| find this incredibly surprisin 


The proposition is actually so far trom 
being valid that | cannot see how someone 
could come up with that in the first place. 
The response | have on the peer review 
process for this paper at present details the 
difficulty change. Every 2016 blocks bitcoin 
readjust the difficulty. The reviewers have 
commiented on this and noted i to be a 
floor that | haven't actually included this in 
my calculation. The fact of the matter is 
that itis a simple addition that makes it less 
likely rather than more likely the miner 
would choose to undertak a dishonest 
strategy. The reason is quite simple it 
cannot be profitable. 
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As we can see, the output is entirely sensitive to any change in the input: alter so 
much as a single letter and the entire hash changes. Note that however long and 


complicated the input, the output is always 64 characters long. Just to make the 
point, here is SHA-256 hash of the entire text of Ulysses: 


6ff1c1a80b68b5414423a7e2e061d5i2fcO9f7c4e86c4987e573bebc4e4991dd 


Put all this together, and you have a system which makes it very easy to check 
whether a given text has been hashed correctly—you just run it through the 
algorithm. At the same time it is impossible to guess the input from the output. 
There are just too many possibilities: it is mathematically impossible to land on 
the correct one. Anyone can check the hash function of Ulysses online in about 
ten seconds. Every computer in the world linked together could not reverse the 
encryption, and work out that the input behind the hash is Joyce’s novel. This is 
just a glimpse of the magic power of encryption. 


Miners take the transactions in the block, hash them, and add them to the hash 
of all the transactions that have ever happened in bitcoin. That’s right: the 
blockchain is a register of every transaction, however small, which has ever 
happened in the currency. The miners then run the hash through a calculation, 
set up by Satoshi, which makes them come up with a solution that finds a fixed 
number of zeros at the start of the hash. That’s a trick to ensure that the 
calculation is sufficiently difficult, for reasons I'll get to in a moment. There’s no 


short cut to this process, dependent as it is on sheer brute mathematical force. 






of work is | 
the third piece of mathematical/cryptographic wizardry involved in bitcoin. The 


through the necessary work involved in finding a solution. The 


miners throw numbers at the problem until one of them sticks and a solution is 
found. (Hence the mining metaphor, the idea that they’re digging for the money.) 


This solution is then broadcast to the entire network. 





been 


4 





Comment [CSW12]: | have finally 
completed the mathematics behind this. 


{tis one of many things will be releasing in 
the next year, some of therm sooner than 
others. From this, we can demonstrate that 
proof of stake is not a Substitute for 
approval work solution. Any proof of stake 
system requires trust and le 

same scenario that we are e 

right now with banks and go’ 


| do not see the gn 
being a problem mr 
abenefit, 


Comment [CSW13]: These restricted 
markets allow for collusive controls that act 
against the benefit of the majority. They 
start with good Intentions and they lead ta 
a scenario where regulators are led by the 
regulated. The result is a creation of 
barrlers to entry. 


A global solution such as the Blockchain 
provides a possible solution. With the 
power to enter the market from anywhere 
we have a scenario where regulation and 
hence cartelisation may become 
economically infeasible. 
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At the point when the transaction is broadcast to the network, Satoshi did another 
clever thing. One of the problems faced by cryptocurrencies is the ‘double spend’ 
problem. A bitcoin is just a string of numbers: how can you tell that Joe, the 
customer in your coffee shop, hasn’t just cut-and-pasted the numbers he’s 

already used four times today? Bitcoin solves this by having the whole network 
check the entire register, every time a new block is added. When the winning 

miner broadcasts the block, the computers on the network run through it to check 
that all the transactions on it are legit, and that no bitcoin has been double-spent. 
ce mputers | 
transaction is accepted: it is stamped with the number ofthe | 





They vote on the legitimacy of the transaction. Once 51. 





block, and added to the blockchain. The miner who found the correct solution is 
compensated for their work in bitcoin: they are paid in the currency, for the work 
they do in validating transactions in the currency. This was another brilliant piece 
of design on the part of Satoshi, creating an incentive, inside the network, for 
people to take part in making the network run. 


isieetion of bitcoin pains with it a Soups of compromises. 









a per cent problem, other than the sheer si 








his unreassuring, as if a bank were to say that the only 





le of safety, 
re the 


nals emptying your bank account were not some absolu 
but just that doing so would be too much effort. That's e 
matter rests with the 51 per cent problem. This is a di 





out all the more given the sophistication with 








the other conceptual problems of the new « 
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Comment [CSW14]: This is not technically 
correct. 


To successfully attack the network, It will 
require more than 50% of computers or 
rather computational power to overturn the 
prior transaction. This is only the prior 
transaction, A double spend is actually 
possible. The solution is simply to 

broadcast the initial seend fast enough and 
fo monitor len enough net 


51% of computers te 
require that they s 


mining is actually very aHect 
The reason being that miners within a pool 
can move quickly between pools. It would 
actually be more problematic if mining was 
controlled by a single corporation or 
individual who had 50% or more, This 
would impact the validity of bitcoin. The 
reason is that miners within pools are 
Individuals who bend together ina rough 
consensus. Corporations on the other hand 
do not disband due to cammunity pressure. 
A pool miner onthe other hand can quickly 
diversify and move to an alternate mining 
pool with little or no change to the overall 
network consensus. They can take their 
power and reassign it toa different control. 
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Another hard thing to ignore is the amount of energy used by miners. As bitcoin 
has got more popular—not civilian-popular, but nerd-popular and cutting-edge- 
capitalist popular—the mining process has had more and more computer power 
thrown at it. The process is wasteful, since most of the mining, most of the time, 
by definition is unsuccessful, because only one miner wins the race. As Vigna 
and Casey point out in Cryptocurrency, by the middle of 2014, the bitcoin 
network, which 


was then producing 88,000 trillion hashes every second, had a computing power 
six thousand times the combined power of the world’s top five hundred 
supercomputers. And just two and a half months later, it had almost trebled to 
252,000 trillion hashes. The world has seen nothing like this level of 
computational expansion. That’s why some doomsayers are predicting that if 
bitcoin continues on its present path, the planet faces an environmental 
catastrophe. 







mental catastrophe caused by bitcoin is some way off, but 
that the process of mining is inherently wasteful. Bitcoin 
ence for setting up in places where it’s cold, to cut down on 








There will only ever be 21 million bitcoin: the finite nature of the currency was 
Satoshi way of making sure that, unlike the fiat currencies which governments 
are free to abuse, nobody could ever destroy the value of bitcoin by arbitrarily 
deciding to create more of it. The schedule is for these bitcoin to be created over 
the course of 130 years. As more computing power is added to the network, it 
becomes necessary to make the mathematical challenges harder, to slow down 
the miners’ progress. That’s where that string of zeros, at the start of the proof of 
work, comes in handy: changing the number of zeros immediately affects the 


difficulty of the calculation, to slow down the 












effect to a system of great intellectual elegan 
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Comment [CSW16]: | personally consume 
36,8 GWVhr a year of electricity, Then, the 
US consumes 4,110,000 GVVhr of 
electricity. 


At this level, we see that Bitcoin will be as 
large as 0.6% of the US electricity use by 
2020. 


A better comparison is of global energy. Of 
this, Bitcoin by 2020 will consume 0.0016% 
of the electricity pool and just 0.0000899% 

of the total eneray consumed. 


Then we can also compare this to 
something more cogent... companies. 


Google alone uses 0.01% of glo 
That is 1,000 times to ele 
Denmark right now. 


Amazon and Facebook a 


Right now, we have a system 

trust that fails and is gamed on a weekly of 
not daily basis and yet we consider it notte 
be wasteful. How can we take a system 
that is more effective, more efficient and 
more elegant than the existing banking 
system, one that uses less electricity, one 
that will use less electricity and yet return 
far more and call it Inefficient? 


| see the problem identified by Frederic 
Bastiat in the fallacy of the broken window. 
We need to consider not just the seen, but 
the unseen as well. We cannot address 
bitcoin based on its electricity use in 
isolation. Rather, what we need to do if we 
wish to be intellectually honest is compar 
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{dropped letter] 


The result has been success for the currency, a much bigger success than most 
people who’ve never heard of it might suspect. The total value of all the bitcoin in 
circulation, as of today, is £4.24 billion. That number changes, often with 
disconcerting rapidity, since the price of bitcoin is sharply variable. This puts 
outsiders off, since one of the most basic functions of money is to store value; 
bitcoin is a lousy store of value, as many observers have pointed out. Bitcoin, 
however, already does an OK job with one of money’s other main functions, as a 
medium of exchange. You can directly buy plane tickets, book hotel rooms, buy 
computer equipment, food, and pretty much anything else with bitcoin, which is 
now accepted by tens of thousands of businesses. Indeed, since you can buy gift 
cards with bitcoin, and use the cards at Amazon and other e-commerce sites, 
you can in effect buy anything you want using the cryptocurrency. There are 
even bitcoin cashpoint machines. | went to look at one the other day, in a café in 
Bermondsey. The ‘SatoshiPoint’ was at the back of the premises, past the 
blackboard where a Flat White was lablelled a ‘Fat Wife’, past the cats’-cradle of 
outstretched hipster legs and charging MacBook Airs, past the merchandise table 
of coffee mugs with the slogan ‘Underneath your tattoos you’re still a mainstream 


cunt’. The SatoshiPoint was broken. Tant pis, as Satpahil would say, if 








main point: bitcoin has done very well for a form of money only seven years only, 
with no entity backing it other than lines of code running on a network of 


computers. 


The growing utility of the currency has attracted attention. Citizens of countries 
such as Argentina, whose governments have a near-perfect track record of 

debasing their own currency and destroying the savings of their citizenry, have 
shown signs of preferring bitcoin to their own state’s money. One of the liveliest 


case studies in Nathaniel Popper's brilliant Digital Gold concerns Wences 
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Comment [CSW18]: Right now I'm not 
sure Whether itis a long time ora short 
time. Seven years seems like a blink of the 
eye and eternity all in one. | didn't really 
expect bitcoin to be at the point itis now so 
early. | did hope it would grow but | thought 
it would grow slower. 


lm not complaining, the uptake has been 
remarkable. Butif fd known, that | would 
have done many things differently, | would 
have mined the way | did but the same 
time would have been more patient. | 
would have spent more time with my family 
and friends and may not be at the same 
place lam now. | certainly would not have 
a patent queue of 500 papers or more 
awaiting filing. Mostly, | would have 
protected myself a little bit 

fo much hubris to get into: 

thinking and a 


Blockchain can grow in sca 
decentralised. We can show tha tr 
miner attack is a work of fiction and 
mathematics derived from a fundamental 
misunderstanding of the bitcoin protocol, 


| arm partly to blame for that. Many 
academics have used the White Paper as 
a source of truth, On page 3 of the bitcoin 
White Paper it says how bitcoin uses'the 
jength of the Blockchain as a determinant 
of the security of the chain: That is the 
Jonger chain wins. Though technically 
correct for each difficulty point this is 
actually more complex than [have reported 
it In reality, the chain that is selected 
happens to be the one that is most 
complex. An understanding of this can be 
obtained through an analysis of the code 
itself, Unfortunately, many who have 
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Casares, a highly sophisticated (and very successful) Argentine investor whose 
interest in bitcoin comes from a life’s up-close-and-personal view of a broken fiat 
currency. Casares is a big investor in and evangelist for bitcoin, not (or not only) 
because it will make him rich, but because it seems to him genuinely preferable 


to state-backed fiat money. He’s not the only one. 


The mathematical sophistication and philosophical suggestiveness of bitcoin are 





not, however, the whole story. A completely anonymous, untraceable way of ——_—{ Comment [CSW19}: | need to inject here 


‘ 5 . F : . again. Bitcoin is not completely anonymous. 
moving money: gee, hmmn, | wonder who'd be interested in that? It’s no surprise itis not untraceable. 
that the first successful application of bitcoin came in the form of a criminal The lel bo ee a i 
: F ; . : first transactions involved exchar 
enterprise. Satoshi Nakamoto’s paper was published in October 2008. The including Liberty in Costa R 


detailed workings of the new currency—the code which would operate it—were 
published on 3 January 2009. The first ever transaction made with bitcoin was a 
deliberately experimental, avant-garde purchase of a pizza, for 10,000 bitcoin, 
made on 22 May 2010. (The community marks the anniversary of the first 
transaction by celebrating Bitcoin Pizza Day. At current values, that pizza cost 
£2.77 million.) The first large-scale criminal application for bitcoin began life only 
months later, early in 2011. 


Silk Road was an online drug market, set up by a charming, handsome, 26-year 
old Texan called Ross Ulbricht. Ulbricht, who had an undergraduate degree in 
physics and a master’s in materials science and engineering, was (is) a strange, 
very twenty-first century combination of driven and feckless. He was not the first 
and will not be the last person to be led astray by his dream of the internet start- 
up route to billions. While doing his second degree, Ulbricht had contracted a bad 
case of Austrian economics, and become convinced that government and 
taxation were essentially coercive systems. (This revelation occurred while he 
was attending Penn State, a publically funded university.) So—to fast-forwards 
slightly—he set up an online exchange where buyers and sellers could meet to 
trade anything that did not involve doing harm to others: what that meant in 


practise was no to child pornography, but a big yes to fake IDs, guns and, 
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especially, drugs. The exchange was accessible only via Tor, the wholly secure 
internet browser which hides the location of users on the network so successfully 
that it is a great favourite of terrorists and paedos. (You may be wondering: who 
could possibly have created such an evil piece of software? Answer: the US 
Navy. It invented and indeed maintains Tor as a means of communicating with 
spies and informants, and a tool for dissidents in totalitarian regimes. The next 
time you hear a securocrat talking about the need to expand internet surveillance, 
you may find yourself wondering why our allies invented, distributed and continue 
to support the single most effective web tool for terrorists, criminals and paedos. 
The answer is that the security classes think the usefulness of Tor outweighs the 
harm it causes—because the harm can be kept in perspective. Except that 
perspective often seems to escape our leaders when they’re talking about the 
need to spy on us.) 





aan 
— 


gave a totally anonymous, non-locatable way of transferring payment. The result 


for Silk Road, which combined the two, was explosive growth. Within two years, 
Silk Road was one of the most successful internet enterprises in the world, and 
had attracted a buyer willing to offer $1 billion. The man running it went by the 
pseudonym Dread Pirate Roberts—an attempt by Ulbricht to imply that the 
person behind the site had changed over time, since in The Princess Bride the 
identity of the DPR is handed down from one incumbent to another. Dread Pirate 





Roberts told a reporter in an encrypted internet chat that he now thought the site 
was worth ten or eleven figures. If his business had been legal, that estimate 


probably would have been accurate. 


Ulbricht had, however, made a mistake. Once, and only once, in the early days of 
Silk Road, he had used his real email address in a forum discussion which 

clearly showed his involvement in running Silk Road. He realised and quickly 
deleted the post, but it had already been archived, and so when the Feds came 


looking, they found the email address, and then had a prime suspect for DPR. By 
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now Silk Road was a flagrant, brazen taunting of the US legal system. ‘Every 
single transaction is a victory,’ announced DPR, over the ‘thieving murderous’ 
state. DPR had a book club. It featured lots of Austrian economics. He was in 
favour of a world in which ‘the human spirit flourishes, unbridled, wild and free!’ 
‘Once you’ve seen what’s possible, how can you do otherwise? How can you 
plug yourself into the tax eating, life sucking, violent, sadistic, war mongering, 
oppressive machine ever again? How can you kneel when you’ve felt the power 
of your legs?’ Elevated sentiments, but in reality Ulbricht was paranoid, terrified, 
and had even gone so far as to commission assassinations of potential informers. 
One of the would-be murderers was an FBI plant set out to entrap him. The other 
commissioned killing had an unknown outcome, because nobody seems to have 
been murdered: the most likely explanation is that somebody or bodies 
pretended to be hitmen in order to con Ulbricht out of money. (Neither case has 
come to trial.) Dread Pirate Roberts had completely lost his marbles. 


That didn’t make him any easier to catch. It’s not that Ulbricht nearly got away 
with it: he didn’t. He was nonetheless hard to pin down, because, even once the 
Feds knew who he was and what he was doing, that combination of Tor and 
bitcoin was still powerful. To convict him they would have to not just catch him at 
it, but grab the computer out of his hands while he was in the middle of criminal 
activity. Otherwise there would be no way to link Ulbricht with the activities on 
Silk Road: Tor and bitcoin would make it impossible. ‘Put yourself in the hands of 
a prosecutor trying to build a case against you,’ DPR said in an online chat. 
‘Realistically the only way for them to prove anything would be for them to watch 


you log in and do your work.’ 


Ulbricht had set up a system whereby simply closing his computer would 


permanently erase his hard drive. He could do the same just by hitting a couple —_-—{ Comment [CSW21]: No, they would have 
an encrypted and not erased drive, 


of keys. They would have to literally snatch the machine out of his hands before 





he could so much as touch the keyboard. The Feds would have one chance and 


one chance only to catch him, and they would have to grab him at his computer 
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while he was logged in as DPR and running Silk Road. So that’s what they did. 
On 1 October 2013 Ulbricht was sitting in a public library in San Francisco, 
logged into Silk Road via the library’s wifi. He was in an online chat with an FBI 
agent whose job to make sure Ulbricht was still online when his colleagues 
swooped. Ulbricht was sat at a desk across from a slight young Asian woman 
when a couple of typical San Francisco street people began loudly arguing just 
behind him. He turned to look, and the young woman grabbed his laptop: she 
was an FBI agent. So were the street people. Nice one, the Feds. Ulbricht was 
logged into Silk Road under the account /Mastermind. Game over for Dread 
Pirate Roberts. Ross Ulbricht went on trial in 2015, was convicted, and is serving 


two life sentences without the possibility of parole. 


There are several morals to this crazy, sad, fascinating story, brilliantly told in two 
long pieces of Wired reportage by Joshuah Bearman, and also in Digital Gold’. 
From the bitcoin point of view, Silk Road was evidence for the largely but not 

xim that there is no such thing as bad publicity. The first thing 





many outsiders heard of bitcoin was the collapse of Silk Road. You might have 





thought that the connection between the new kind of money and the new kind of 
criminal enterprise was offputting, but it didn’t work like that, mainly, | think, 
because the scandal/disaster of Silk Road contained a nugget of public relations 
magic for bitcoin: it showed that the currency has value. You could use bitcoin to 
buy and Sell actual real world things that people want, stuff like cocaine and 
handguns and fake driver's licenses. If the money was good to buy those things, 
it would be good for other stuff too. 


This speaks to the first and loudest and most persistent doubt most civilians have 


about bitcoin: why on earth it has any value at all. The truthful answer—which 





1 Ulbricht’s story may strike some readers as resonating with the Mr Chips-to- 
Scarface journey of Walter White. A detail from Wired’s reporting: when the 
computer was snatched out of Ross Ulbricht’s hands, he was, in addition to running 
Silk Road, simultaneously watching an interview with Vince Gilligan, creator of 


Breaking Bad. 
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concerns the arbitrary basis of all monetary value—tends not to reassure 
sceptics. What Silk Road provided was a proof which went beyond argument: it 
showed that it just does, OK? This point was all too convincing for some of the 
officials involved. In a twist which would seem too rich in a work of fiction, two of 
the agents who hunted DPR, Secret Service agent Shaun Bridges and FBI man 
Carl Force (!) turned out to have stolen bitcoin from DPR. They pled guilty to 
charges of money laundering and obstruction of justice. Force got 78 months, 
and Bridges 71. Even Federal agents fell victim to the siren call of the 


anonymous currency. 


The FBI, in the processs of arresting Ulbricht and shutting down Silk Road, 
became one of the world’s larger owners of bitcoin, because it seized the site’s 
considerable assets: 144,000 bitcoin, worth £43.9 million at today’s prices. It was 
a point of interest what they would do with them—and a point of danger, too, 
since it seemed possible that once the new currency had the attention of the 
authorities, they might conclude that this extra-governmental, anonymous, 
untraceable money was, in and of its own nature, illegal. Instead what the FBI did, 
after thinking for a bit, was what they do to other confiscated assets: they 
auctioned them off. The implicit point was not missed: the Feds say bitcoin is 
legal. It follows that bitcoin has legitimate uses. That was a strong message. 
Bitcoin emerged from Silk Road in better shape than ever. 


The next big scandal to affect bitcoin could and arguably should have been more 
damaging. It concerned an online exchange, based in Japan, called Mt Gox. 
(The name comes from the site’s previous existence as a trading forum for the 
nerd-beloved card game Magic: the Gathering. It means Magic: the Gathering 
Online Exchange.) Mt Gox came into being as the answer to the question, how 
can | get hold of some bitcoin, and/or how can | turn this bitcoin | have into real 
money? It was the place where you could buy bitcoin at whatever was the 
prevailing rate of exchange with whatever currency you held—a rate which has 


always been prone to wild fluctuations. It would store those bitcoin for you. As 


Page 20[30 


DEF_00046855 


Case 9:18-cv-80176-BB Document 829-79 Entered on FLSD Docket 12/16/2021 Page 22 of 
31 


and when you chose to exchange those bitcoin for cash, it would find a buyer. 
There were other places where you could do that, but Mt Gox was by far the 
biggest and best-known: by 2013, it was handling 70 per cent of all bitcoin 
transactions. 


Mt Gox was located in Japan, and was run by a Frenchman called Mark Karpelés. 
He had the background characteristic of many cutting-edge computing types, 
combining advanced mathematical skills and a high degree of social isolation. 
The early bitcoin world was convivial, with many conferences and meet-ups, at 
which the community of early adopters, an evangelical crowd, would hang out 
together and exchange ideas. Everybody knew everybody. Karpelés didn’t go to 
these gatherings. He had an unusually close relationship with his cat, Tibidane, 
whose health was not robust. Tibidane needed special injections which only 
Karpelés was able to give, and that made him unable to travel to meet-ups. 


Karpelés was evidently bright in many respects, and had a clear vision of how 
important bitcoin could become: while running Mt Gox he was designing a point- 
of-sale machine, like a credit card reader, which would accept the currency; he 
was also working on a Bitcoin Café in Tokyo, which would be a showcase and 
proof of concept for the currency. But Karpelés, along with this skills and his 
ideas, had something else, too, a trait apparent in many star players from the 
digital world. He had very little sense of what he could not do. He didn’t 
understand limits and practicalities. It is difficult to do ingenious new things with 
digital ones and zeros, and the people who have done so are correctly aware of 
how clever they are. But it is even more difficult to do clever things which are not 
digital. The digital stars dislike and resent the intractability of the non-digital world, 
full as it is of competing interests, resentful incumbents, and human challenges, Comment [CSW23}: And this is the point 
sak things.’ . the community has lost. 
/ We need to be willing to take risks, 


Those maxims are much more useful when you're dealing with digital bits than ___/ | Kor those who propose to support and 





j ‘ ‘ & colegio : implement libertarian ideals, they seem 
when you're dealing with people. The generation of digital ‘disruptors’ and nthe paternalistic when it Cons to money. 


For Bitcoin to work, we need to be willing ta 
take risks and to experiment. 
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innovators have a shared tendency to imagine that they have important insights 
into worlds that they don’t in fact understand. 


In the case of Mt Gox, the problem was basic: Karpelés couldn’t run a company. 
Mt Gox’s employees were on the second and third floor of a Tokyo office building. 
Karpelés’s office was on the eighth floor. The employees often had no idea what 
their boss was doing, and since he kept a tight hold of the main functioning of the 
business, that meant nobody knew what the hell was going on. That mattered, 
because it became clear in 2013-14 that something was awry inside the world’s 
main bitcoin exchange. Transactions were notoriously slow. Bitcoins being held 
on the exchange were worth $100 more than bitcoins elsewhere. That’s because 
if you had money at Mt Gox, it took so long to get hold of it that it was easier to 
turn the dollars into bitcoin, and then transfer the bitcoin elsewhere: the mismatch 
between supply and demand drove up the price, as economics teaches us it will. 
There had always been problems with the Japanese bank who handled Mt Gox’s 
transactions, but these difficulties seemed to go deeper. Except nobody really 
knew what was going on, apart from Karpelés, and he wasn’t telling. 


On 7 February 2014, Karpelés suddenly closed down all transactions on Mt Gox. 
He put out a statement blaming a flaw in the bitcoin protocol that allowed users to 
alter transaction codes in a manner that made it impossible to tell if the 


transaction had gone through. That would enable them to spend money twice— | 


setly one of the technical propiems Satoshi had supposedly / 






the bitcoin IRscORIAy at Karpelés’s announcement, because it turned out this 


‘quirk’ in the protocol was well known to developers, and all the other exchanges 
had developed ways of working around it. Hackers began using the newly- 


publicised flaw in the protocol to attack bitcoin exchanges. 


The flaw was a red herring. The real problem facing Mt Gox was, quite simply 


and shockingly, that it had lost all its bitcoin. To understand how this can happen, 
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Towards the end even taking | 
the exchange became difficult 


We saw the writing on the wall for MtGo 
well before the problem but there was little 


opportunity to use anyone else. A year 
before we had been using Liberty 
exchange in Costa Rica) This had worked 
for some time but when the US 
governmient closed Liberty and seized all 
the funds we were left with nothing but Mt 
Gox. 


Just before the collapse we were in 
negotiations with Falcon capital in an 
attemipt fo sell bitcoin, if we had another 
two months before the collapse then we 
may have been fine but unfortunately not 
everything works out the way you plan. 
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you need to grasp that when you own bitcoin, you don’t own anything physical: 
what you own is an entry on the register. Your ownership is merely access to that 
entry on the register. As for ‘you’, in this context all you are is an address on the 
register: that’s why bitcoin is anonymous. The address, which is nothing more 
than a string of numbers, could belong to anyone. To get access to it, you need 
its key: another string of numbers, cryptographically matched to that specific 
bitcoin address. So the address is one string of numbers, held publically on the 


register; the key is another string, held privately by the bitcoin’s owner. 


The analogy with a physical key, however, is not complete. Lose a house key 
and you can ask your neighbour for the spare you thoughtfully gave them, or call 
a locksmith, or break in through a side window. Lose a cryptographic key, and 
you have irrevocably lost access to your information. That string of numbers is 
unforgiving. The history of bitcoin has some happy surprises, such as the story of 
the Norwegian electrical engineer who bought $26.60 worth of bitcoin in 2009, 
then forgot all about them until he saw coverage about the cryptocurrency in 
2013. He couldn't at first remember the password he had used to encrypt his 
private key—that must have been a sweaty few moments—but then he did and 
the coins were still there. They’d gone up a bit: to $886,000. He took a fifth of 
them and put down a deposit on a flat in a posh bit of Oslo. That’s a happy 
ending. But the unforgiving power of the public address/private key combination 
has also seen 7,500 bitcoin lost under a landfill outside Newport in Wales, when 
an IT worker chucked out an old hard drive on which he had stored the private 


keys from his 2009-era bitcoin stash. Current value of loss: £2.1 million. 


Satoshi’s idea had been for people to keep their bitcoin keys in ‘wallets’, a private 
digital locker. You’d go online when you needed to spend something from the 
wallet, but otherwise it would be stored safely on your computer or mobile phone 
or whatever. The disconcerting power of the address/key combination, though, 


led people to want another solution to keep their keys safe—and it’s that, 





ironically, which led them towards places such eed Crypisy, the 
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lapsed 
ey lost a lot 


roughly similar exchange which as of toda 







under very similar circumstances. By similar 
of bitcoin and don’t know how. The bitcoin w 
offline wallets, which ought to have meant they were safe. The proprietor of 


Cryptsy posted this message on the company blog: 


A very interesting fact here, however, is that those Bitcoins have not moved once 
since this happened. This gives rise to the possibility they can be recovered. In 
fact, I’m offering a bounty of 1000 BTC for information which leads to the 
recovery of the stolen coins. 


If you happen to be the perpetrator of this crime, and want to send the coins back 
no questions asked, then you can simply send them to this address: 
1KNiI4E4MTSF7gfuPKPNAbrZWQvidQBTAAa 


There’s something sweet about asking someone who has stolen lots of money— 
10,000 bitcoin, worth £2.8 million—to pretty please just give it back, and if they 
do you promise not to be cross. But there’s something completely idiotic about it 
too. From the same blog post: ‘Some may ask why we didn’t report this to the 
authorities when this occurred, and the answer is that we just didn’t know what 
happened, didn’t want to cause panic, and were unsure who exactly we should 
be contacting.’ The note of bafflement is embarrassing. It’s as if it had never 
occurred to the masterminds at Cryptsy that a deregulated currency, explicitly 
constructed to be outside state control and policing, might tempt thieves, and 
might also have a problem getting help from the authorities. As for the precise 
particulars of what happened to Mt Gox’s bitcoin, we'll probably have to wait for 


Mark Karpelés’s trial to find out: in August 2015 he was arrested by the Japanese 


police and in October he was charged with embezzlement. 


The two best books on bitcoin itself are Paul Vigna and Michael Casey’s 
Cryptocurrency and Nathanael Popper’s Digital Gold. Vigna and Casey are 
excellent on the technical background to the currency, the detail of how it works. 
They convincingly explain the trajectory of thinking most people go through when 
they hear about the currency, from Disdain through Scepticism, Curiosity, 
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wallets’, ie | comment [cS W251: Ways of protecting 





against this loss. 


One of the difficulties is of course that itis 
still early on in code development for a 
system that is extremely complex. Some of 
the solutions to key recovery have been 
overly simplistic but as we go a long time 
there will be better escrow functions and 
more ways to derive keys. 


We already have a paper concerning the 
derivation of hierarchical key pairs and 
derived keys. Coupled with a 

scheme we and up with am 


Pp 
things, accountin 
and more. 
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Crystallisation and Acceptance. Their book leaves you thinking there is a bright 
future to this cryptocurrency lark. Popper’s book is fascinating on the detailed 
history of what’s happened with bitcoin, telling the stories of both the true 
believers and the early adopter-investors, but not sparing specifics on the many 
scandals and panics bitcoin has already gone through in its short life. The effect 
of reading both books in succession is to hear first the reasons why bitcoin is full 
of potential, and then the reasons why it is full of risks. One of the most offputting 
strands in Popper’s book concerns the all-too-present threats of hacking, 
extortion and theft around the cryptocurrency. The Mt Gox scandal has been the 


worst of these so far, but won’t necessarily be the last. 


An example of the kind of risks involved in dealing with the currency happened In 
March 2014, when Satoshi’s real identity was erroneously ‘revealed’ by 
Newsweek. Their mistake, hilariously, was to pick a real Japanese-American 
man called Satoshi Nakamoto, who called the currency ‘bitcom’ and told 
reporters, accurately, ‘| got nothing to do with it’. He then offered an exclusive 
interview to the first person who would buy him lunch. It became rapidly and 
irrevocably clear that Satoshi wasn’t, you know, Satoshi. 









posed, though, many bitcoiners pointed out what a 
agazine might have put Satoshi in. If h 
e would also be the owner of many e: 








e genesis block’, the first chunk of the digital 
Tr would be worth well in the hundreds of mil 
ey se holdings would be kept somewhere—{ 
f or extortionist would need to get hold of roughly h 


that — of numbers. Bad men have been faeries to do 
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he and his co-investors store their bitcoin ored ina 







Safe deposit box. No other form of compute ecure. lf 


those are the lengths you have to go to do del e crooks, what 


does that say about the stability ofthe cryptocurrency? = eommenticswee: sd 


This history of criminality, fraud and disaster might well, you’d have thought, add 
up to a story of failure. It hasn't. In parallel with the high-profile, front-pagey 
things which have gone wrong with bitcoin there has been a consistent trajectory 
of growth and increasing interest. For all the things which have gone wrong, the 
currency itself has not collapsed, and not been shown to be mathematically or 
conceptually flawed. The fact that the world is full of crooks, thieves, conmen and 
incompetents doesn’t invalidate the use of other types of money, so why should it 
invalidate bitcoin, just because it has so many criminal-friendly features? That 
seems to be the thinking. In any case, this currency, which is based on nothing 
more than mathematical calculations, is now worth billion of dollars, and has 
moved a long way from the early-adopting internet libertarian fringe of its early 
supporters. The irony is that with success has come the most serious threats yet 
to the continuing existence of the cryptocurrency. 


The first of these threats comes in the form of what nerds call ‘forking’. The whole 
point of open source software, such as bitcoin, is that it is released into the wild, 
and users are allowed to amend and tweak it as they see fit. If a version is 
changed so that it becomes in some respects incompatible with other versions, 
that form of the software is said to be ‘forked’. The software which runs Amazon’s 
Kindle e-reader, for instance, is a forked version of Google’s open-source 
Android operating system. (It is, to use one of my favourite tech terms, a ‘forked 
Android’.) The open source nature of bitcoin has meant that the community can 
make changes to it, and that these changes are in effect voted on: bitcoiners 
either download and use the software, or they don’t. It’s a kind of ongoing 
plebiscite. When problems have arisen, they were adjudicated first by Satoshi 


him/her/it/themselves, and then after he/she/it/they quit the scene in 2011, by a 
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small group of five ‘core developers’, the lead one of whom was a computer 


scientist called Gavin Andresen. 


What’s happened now is that there is a split in the bitcoin community, and also 
among the core developers. The issue is a recondite one concerning the block 


size—the amount of data in those 10-minute blocks of transactions. Satoshi set a 







block limit of one megabite, apparently with the intention of t 







as the size of the network, number of transactions and 
ters grew. One part of the community thinks that limit | 
rency, which will grind to a halt as transactions 
q ded to the blockchain. At that point, the currency becomes wd 
useless. So a group of developers, including Gavin Andresen, in August 2015 
launched Bitcoin XT, which is bitcoin as we know and love it but with a larger 

block size. Another group of developers disagrees: they think the change will 

take bitcoin too far in a corporate-friendly direction, and would prefer a smaller, 
slower, ideologically purer version of the cryptocurrency. The dispute has been 
acrimonious, and has seen a huge hacking attack launched against the XT 
network, and all mentions of XT censored from official bitcoin forums. So bitcoin 

is now forked. Mike Hearn, a prominent member of the bitcoin developer world 

and one of the people behind XT, quit the bitcoin world this January as a result of | 
the split, and now regards the currency as a failed experiment. ‘Despite knowing 
that Bitcoin could fail all a the now cael ede conclusion that it has failed | 


Bitcoin will either recover from this, or not. 


It should also be said that some bitcoiners believe more in the technology than in 
its use as money. David Birch is the author of a fresh, original and fascinatingly 
wide-ranging short book about developments in the field, Identity is the New 
Money. His is the best book on general issues around new forms of money, and ; 
You finish his book 


convinced that something is happening in which the register, and credit more 





new possibilities generated by blockchain te 





‘rise OVer 


Comment [CSWe27]: This was arguably my 
biggest mistake. After It had been 
implemented and well before ft mattered | 
made the comment: 


“ican be phased in, like: 


if (blocknumber = 115000) 
maxblocksize = largerlimit’ 


The reality was that | should have a she 

just implemented this: Blocks size change 
was implemented without consulting 

anyone so | should've dane the same here, 
The reason for the limit was a DoS based 
on spam at the time. This was small 
transactions that people are sending back 
and forth to themselves for no reason other. 
than to increase ine size of 


At that point | in ime a was 


{ disagree with how we 
different reasons. It adds a lev 
complexity that was not needed. 





Comment [CSW29]: A quick review of the 


|| \White papers and patents that we are filing 


will demonstrate that there is far more to 
this than simple monay itis a new way of 
doing many things. 


What we're doing Is comrmoditising and 
packaging nearly anything. This can be 
accessed to using a road through micro 
payments or prepaid computations but at 
the end of the day there is very little that is 
not measured and recorded and cannot be 
80. 
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generally, and money, and banking, and identity, are all starting to blur together. 
That said, he’s not sure about bitcoin the currency. ‘I'm not convinced that money 
or payments is the optimum [use] of the technology,’ Birch has said, in response 
to this latest kerfuffle. It’s easy to see the force of that, given than even in 


bitcoin’s pristine form, it takes 10 minutes for a transaction to be block of 





but as a way of eohentie thd identities, exchanging contracts, and executing 
transactions. In ae the UK government's chief scientific advisor issued a 





F 
adapted to do this with lower isvets of haction: lower javels: 6f cok ead higher 


levels of security, than any existing system. This may not be the blockchain in its 
original bitcoin form, but some other blockchain or blockchains, using subtly 


different versions of Satoshi's brilliant technology. It's this potential has attracted 


the attention of—cue music that indicates arrival of the bad guys—the banks. 


Many people in the world of finance went through the bitcoin trajectory Vigna and 
Casey describe, from disdain through curiosity to acceptance. Their interest is 
mainly in blockchains. The banks have looked into the possibility of better, faster, 
cheaper systems powered by blockchains, and have concluded that its possible 





ir business: 
up of 


are rushing to 


for this to be either a source pf disruption and disintermediati 










it's going to be another thing they own, They prefer the lat 
competing syndicates, funded and largely owned by the ba 
develop and patent proprietary, finance-friendly versions of blockchain 





technology. A consortium called R3Cev is backed by 42 financial companies, and 
seeks to develop what would in effect be a private blockchain; Goldman Sachs, 


which is one of the firms behind R3Cev, has also filed a patent for a private 
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Comment [CSW30]: This isn't exactly 
correct. 


The correct way of looking at it would be 
that a settlement occurs following an 
average period of 10 minutes and that the 
settlement is fairly much irreversible no 
matter what after an hour. 


{tis possible to set up a transaction so that 
it can be broadcast and disthibuted within 
seconds. This is probabilistic in a tisk factor 
needs to be added in that this is the 
scehario with credit cards right now. The 
difference in quick small payments is that 
the risk can actually be reduced far lower 
than a credit card payment can be. 

can monitor and know abou 

seconds. 





We can actually ta 
including pre-for work ar 
transaction itself. 





Comment [CSW33]: The interest Is in 
Blockchain's rather than bitcoin 
predominantly as they are not early 
adopters. 


Bitcoin works because of scarcity. The 
coins and up with value and can be traded, 
‘The so-called value of what they want to do 
is to create something where they control 
the system. It would have been possible 
early on for them to do this but fo do so 
would have meant coming to the party 
early which luckily they did not want fo dao. 
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blockchain-backed currency called SetlCoin (one wag at the FT has dubbed It 
‘the vampire’s quid’); Digital Assets Holdings, another blockchain company, is run 
by Blythe Masters, the English former JP Morgan executive who did more than 
anybody else to pioneer the credit default swe 





financial instrument which was a huge success until it fed the global 


related initiatives. One result is a great deal of confusion. Bitcoin was apparently _ —{ comment [Csw34}: They have not seen 
: Fi . . anything yet. 
a major topic of conversation at Davos, where there was evidently a great deal of 


blurring between bitcoin the currency, bitcoin the technology, cryptocurrency in 
general, the blockchain as in bitcoin, or the blockchain as in blockchains in 
general. The headline news is as follows: in the world of finance, the blockchain 
is definitely going to be A Thing. 


lrony klaxon. The very first sentence of Satoshi’s original paper reads as follows: 


peer version of electronic cash would allow online payments to 








f, on the contrary, those very same financial institutions 


s new technology to keep themselves right where they are: in 


the middle of every possible transaction network, extracting all the rent they can. 


Bitcoin true believers are annoyed that pretty much every discussion of the 
cryptocurrency ends with a rhapsody about the potential of blockchains. 
Bitcoiners reject that idea: for them, the blockchain will never succeed apart from 


the currency. The trouble is, though, that in internet terms, bitcoin has already 


the 


been around for quite a while. January was seven years since the launch of previous century more than what they are 
now. Perversely, itis the introduction of 
Satoshi's original code. In seven years, Google, Facebook and Twitter had all regulation designed to stop the current 
scenarios that has led to the existing 
become not just big companies, but fundamental parts of everyday life for problems of banking. 








2 Masters went on to be head of the commodities business at JP Morgan, but left 
after the bank paid a $410 million fine for its role in tricking California and 
Michigan into overpaying for energy. 
http://dealbook.nytimes.com/2013/07/18/jpmorgan-executive-may-escape- 
penalty/ 
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hundreds of millions of people. They had become verbs. M-Pesa is about the 
same age as bitcoin, and handles half Kenya’s GDP. Bitcoin is nowhere near that. 
It’s time for the cryptocurrency to decide what it wants to be when it grows up. 
Blockchains could become nothing but a new technique to ensure the 
continuation of banking hegemony in its current form. That would be one of those 
final plot twists which leaves everybody thinking that although they enjoyed most 
of the show, the ending was so disappointing that they now wish they hadn’t 


bothered. Or they could have an impact as great as the new kind of banking 






introduced in Renaissance Italy. That would be more fun, =f Comment [CSW36}: Even this is thinking 
$0 so small. 
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